Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
File: Tm32g40DOAFB635O5V3AXYcGHck.mft (raw, json)
Hash identifier: Y7zUbmHX0YkDuvkm7kZ4MVR7X+K+bBjDOWqnthn7xtw=
Subject key identifier: B9:24:4A:EC:E4:7B:3B:FC:78:2A:4F:36:3D:93:DE:DA:E5:C3:A2:D2
Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
Certificate issuer: /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Certificate serial: 0194BC72D9770D848F6560048615468AF222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
Manifest number: 0E78
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: 6zGLvq4k5vmzCBWK5uxpgKx-SpM.roa (hash: d72RjXOy3TrPnzNgu1Y/cwJXn9F8xvKoAfaZ+LW3oR4=)
2: Tm32g40DOAFB635O5V3AXYcGHck.crl (hash: V07PXr02zOd9+48/aj29/e1WuG+86fMuwVKeUmrM22c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d9:77:0d:84:8f:65:60:04:86:15:46:8a:f2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=b9244aece47b3bfc782a4f363d93dedae5c3a2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:0a:6d:d9:a3:ba:c5:15:70:b8:a2:6a:2e:
78:ac:1a:11:4c:6a:63:7d:5c:4e:85:8e:9e:9e:f1:
9a:ce:d9:da:bb:7c:c4:8c:14:80:46:98:58:58:81:
cf:2d:6d:30:b6:a8:67:b8:ab:43:9d:1d:54:96:15:
8f:a8:ca:f6:c5:ad:9b:de:4b:f3:33:6d:ae:a2:7e:
e3:5b:52:f0:14:ca:1c:44:16:d8:ec:4e:da:a6:6b:
93:42:d3:e3:a8:d3:bd:e4:a5:fd:31:bc:eb:d8:06:
90:3c:e9:61:ab:1b:6a:cb:8a:40:1e:98:c1:23:27:
dc:1b:05:9e:5f:02:c5:1b:87:b5:2d:ae:e7:be:62:
48:ac:cd:98:34:6b:46:b9:62:5f:a8:59:97:0f:cf:
f2:8a:ca:94:a1:68:9b:f9:d6:1f:39:86:b0:1d:01:
cc:40:c6:4a:b7:44:2d:04:2f:76:21:58:9c:00:9d:
42:b8:95:b1:e5:13:d3:51:ea:bd:ca:c0:e3:23:e8:
ea:91:7a:76:96:5d:dd:f9:c1:f6:d4:d4:e6:7a:5a:
b5:83:4a:48:74:e8:8d:b4:0e:98:ac:1e:19:0a:13:
25:87:32:b1:80:dc:76:83:b0:31:e3:f2:24:6e:3f:
77:14:5f:41:d8:2f:5a:6c:97:2f:1e:f2:ee:ac:6b:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:24:4A:EC:E4:7B:3B:FC:78:2A:4F:36:3D:93:DE:DA:E5:C3:A2:D2
X509v3 Authority Key Identifier:
keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:75:57:44:53:7c:19:23:4f:96:f9:9b:a8:ed:29:0e:77:89:
c6:1f:ac:89:ce:d2:d7:0f:7e:88:cc:59:2e:7e:bb:e7:2d:da:
46:99:b9:d9:20:ec:a1:00:69:65:25:49:a5:62:a9:d3:09:db:
d5:9c:c4:ed:e9:98:56:eb:40:bc:8d:13:bc:82:f8:c0:3d:c8:
08:a8:14:70:b4:4f:d4:4d:4f:4e:23:6f:31:65:65:13:90:b3:
1a:b5:a2:90:43:be:0b:2e:e2:90:b6:e3:05:c5:d3:43:52:04:
bb:5d:9b:9b:09:84:4e:d5:3e:b0:e5:03:56:4a:51:3b:22:ba:
a5:87:f9:66:35:f8:2f:4b:c3:e0:a2:51:54:10:86:a5:48:b6:
da:6a:b0:8c:3f:c9:24:54:6b:3f:c7:c5:12:50:d9:e5:5b:e7:
18:f5:d1:db:cf:17:8e:62:46:6c:b8:e2:56:c6:74:99:76:5e:
34:ca:7a:dd:6c:2e:f5:5c:d7:1b:95:3f:82:9f:72:fe:87:be:
0d:34:4c:68:14:23:ed:9a:57:2f:05:86:94:75:ec:06:4e:df:
73:df:02:29:23:8e:b6:58:cf:a8:cb:eb:e2:79:dd:d0:98:13:
8f:90:e8:13:1f:e3:2e:83:a7:26:5c:b6:e1:53:10:81:27:83:
e4:b0:01:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctl3DYSPZWAEhhVGivIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNmRmNjgzOGQwMzM4MDE0MWViN2U0ZWU1NWRjMDVkODcw
NjFkYzkwHhcNMjUwMTMxMTMwMDMwWhcNMjUwMjAxMTMwMDMwWjAzMTEwLwYDVQQD
EyhiOTI0NGFlY2U0N2IzYmZjNzgyYTRmMzYzZDkzZGVkYWU1YzNhMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn0KbdmjusUVcLiiai54rBoRTGpj
fVxOhY6envGaztnau3zEjBSARphYWIHPLW0wtqhnuKtDnR1UlhWPqMr2xa2b3kvz
M22uon7jW1LwFMocRBbY7E7apmuTQtPjqNO95KX9Mbzr2AaQPOlhqxtqy4pAHpjB
IyfcGwWeXwLFG4e1La7nvmJIrM2YNGtGuWJfqFmXD8/yisqUoWib+dYfOYawHQHM
QMZKt0QtBC92IVicAJ1CuJWx5RPTUeq9ysDjI+jqkXp2ll3d+cH21NTmelq1g0pI
dOiNtA6YrB4ZChMlhzKxgNx2g7Ax4/Ikbj93FF9B2C9abJcvHvLurGtrywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkkSuzkezv8eCpPNj2T3trlw6LSMB8GA1UdIwQY
MBaAFE5t9oONAzgBQet+TuVdwF2HBh3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82ZWViNWMtZDI1MS00NzBhLWE3Y2Qt
MzE4MzYyMDA0ZThhLzEvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82ZWViNWMtZDI1MS00NzBhLWE3Y2QtMzE4MzYyMDA0ZThh
LzEvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHVXRFN8
GSNPlvmbqO0pDneJxh+sic7S1w9+iMxZLn675y3aRpm52SDsoQBpZSVJpWKp0wnb
1ZzE7emYVutAvI0TvIL4wD3ICKgUcLRP1E1PTiNvMWVlE5CzGrWikEO+Cy7ikLbj
BcXTQ1IEu12bmwmETtU+sOUDVkpROyK6pYf5ZjX4L0vD4KJRVBCGpUi22mqwjD/J
JFRrP8fFElDZ5VvnGPXR288XjmJGbLjiVsZ0mXZeNMp63Wwu9VzXG5U/gp9y/oe+
DTRMaBQj7ZpXLwWGlHXsBk7fc98CKSOOtljPqMvr4nnd0JgTj5DoEx/jLoOnJly2
4VMQgSeD5LABsg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:26 2025 by rpki-client